Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/38352e3230382e37322e302f32342d3234203d3e203631333137.roa
File:                     38352e3230382e37322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          8FL7jhgQohbsA3gd+ow7sfy9uALadD5576yz49HK3Qc=
Subject key identifier:   1C:50:95:8F:CD:8F:AF:C3:BE:87:85:B1:9D:7F:B3:88:33:1B:78:42
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       4B8047A25071F2F56F847669DF449428435758B6
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/38352e3230382e37322e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 29 Nov 2021 08:03:43 +0000
ROA not before:           Mon 29 Nov 2021 07:58:43 +0000
ROA not after:            Mon 28 Nov 2022 08:03:43 +0000
asID:                     61317
IP address blocks:        85.208.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:80:47:a2:50:71:f2:f5:6f:84:76:69:df:44:94:28:43:57:58:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Nov 29 07:58:43 2021 GMT
            Not After : Nov 28 08:03:43 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:34:73:a7:69:ae:dc:76:13:a6:f1:e2:76:1e:
                    ba:df:67:06:1e:f3:60:4a:0d:0d:cd:77:c7:f7:74:
                    23:6c:a7:7c:9f:03:04:08:dd:69:ab:a4:e4:36:42:
                    59:f9:1b:f1:52:78:7e:dc:0f:b9:a8:d3:bf:38:95:
                    cb:6f:f3:5c:4b:7b:f5:98:a0:7f:2e:55:4b:16:7e:
                    e7:ac:ec:ab:4b:dc:a6:2b:1f:b4:d9:8f:4f:49:bd:
                    a3:a0:2b:d9:c0:61:de:1b:c8:a7:ff:58:c9:b7:ee:
                    f6:41:7d:69:c5:de:bf:23:9d:fd:c9:1a:3f:29:40:
                    6c:d6:42:5c:f4:d7:b9:63:77:7c:48:56:e9:5d:39:
                    08:99:b4:29:c0:ef:1b:db:7f:79:49:e9:d8:81:fa:
                    8f:0c:a9:a8:bd:8f:90:a2:6d:b7:13:93:c1:73:3d:
                    86:52:75:e6:a0:9f:02:ae:30:47:b9:59:1f:85:72:
                    66:b4:30:7e:20:cf:e6:43:75:23:29:af:54:8e:ce:
                    82:c6:3d:f8:99:be:a1:98:65:9e:f5:47:be:da:6f:
                    63:74:99:2e:37:cc:ed:7b:5c:cd:be:80:c5:9f:5b:
                    d2:1a:b4:a6:1e:92:16:ab:29:e5:0d:28:89:cb:58:
                    c7:8d:5f:39:7c:03:62:82:d3:f6:42:fd:bf:99:33:
                    ec:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:50:95:8F:CD:8F:AF:C3:BE:87:85:B1:9D:7F:B3:88:33:1B:78:42
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/38352e3230382e37322e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.208.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:8e:2f:56:0b:d2:fe:e5:67:8d:97:e6:b7:16:5e:1e:6a:71:
         39:38:19:7b:54:8d:b5:17:9c:43:38:63:4f:a6:ea:5b:9e:6b:
         54:fe:68:40:26:88:2c:82:d6:a9:90:c1:2d:dc:74:6a:c8:97:
         d6:38:e6:e4:de:31:1d:e1:db:1b:2e:ef:5a:bd:7c:bb:67:1e:
         f4:ce:4a:d4:65:11:cf:12:b4:f9:23:80:92:cf:b1:b6:60:01:
         44:2d:8f:d9:54:53:7a:2b:12:fc:b2:dd:b6:5e:37:ba:8a:7a:
         b6:cb:53:6a:04:13:95:cf:05:3b:ab:22:32:6c:61:0d:ad:73:
         64:b1:31:1c:55:f4:20:ae:c4:65:b1:7f:78:a2:d1:04:c0:19:
         db:c3:60:d2:82:bd:6e:17:46:7d:f5:25:43:57:97:ed:2e:b6:
         62:76:c4:7d:fc:8f:e9:6e:17:d4:e2:01:ea:11:40:ad:ee:fc:
         2a:a1:a8:5f:b0:22:b3:c9:a7:4e:e2:2a:05:d7:16:29:24:45:
         52:0f:5f:f3:2f:63:73:04:81:c7:f0:9e:70:83:b0:26:20:a3:
         8a:57:43:f3:53:54:15:45:ae:1f:ee:80:a8:e9:59:e4:da:4f:
         0f:4b:16:aa:e6:a4:cd:5b:a2:1b:bf:a3:36:76:44:29:89:c2:
         ee:05:85:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org